For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

BenN_NZ's avatar
BenN_NZ
Icon for Altostratus rankAltostratus
Jun 28, 2019

How to perform email OTP before authentication?

We are wanting to perform an email OTP verify prior to authenticating the user against AD.   I've got some way towards this by placing an OTP macro near the start of a flow (using an AD Query to ...
application delivery
BIG-IP Access Policy Manager (APM)
policy
BenN_NZ's avatar
BenN_NZ
Icon for Altostratus rankAltostratus
Jul 03, 2019

For anyone else wanting to do this - I was able to pre-populate the error in the second logon form by using a Variable Assignment block, setting:

 

session.logon.page.retry = Text 1

session.logon.page.errorcode = Text 1000

 

Flows through nicely now, with a logical UX, yet still OTP before auth - primarily to protect password changing.